Threats Tagged 'spysolr'

BTMOB is an Android remote access trojan (RAT) that evolved from the SpySolr malware family. It is distributed via phishing campaigns and fake app stores impersonating streaming services, cryptocurrency platforms, and government agencies. The malware abuses Android Accessibility Services to gain elevated permissions, enabling it to exfiltrate sensitive data, capture screenshots, record device activity, and establish remote control of infected devices. BTMOB is marketed as malware-as-a-service with an APK builder interface allowing rapid payload creation without coding skills. Its phishing lures are regionally customized, including campaigns targeting Argentine tax authorities, indicating a global reach. There is no known patch or official remediation, and no known exploits in the wild have been reported. The threat is assessed as medium severity based on its capabilities and distribution methods.

MediumMalwareArgentinaBrazil#android rat#latin america#phishing campaigns